Dual wan failover




Static routes are removed from the routing table only if the associated interface on the security appliance goes down

Once the target is available again, the first route is replaced in the routing table, and the backup route is removed.

load balancing or load sharing as it is not supported on ASA/PIX . Use this configuration for redundancy or backup purposes only.


功能名稱: SLA monitor (static route tracking feature)



config 的關鍵地方:

route outside 1 track 1
route backup 254

sla monitor 123
 type echo protocol ipIcmpEcho interface outside
 num-packets 3
 frequency 10
# lifetime of the process is specified to be forever
# The process is scheduled to begin at the time this command is entered
sla monitor schedule 123 life forever start-time now
# sla map to track
track 1 rtr 123 reachability
# "rtr" = Response Time Reporter entry.




show running-config sla monitor

# 現在狀態

show sla monitor configuration

show sla monitor operational-state

# 出現問題時會有:

Timeout occurred: TRUE



Debug Commands


# ping 的情況

debug sla monitor trace

# SLA monitor process encounters

debug sla monitor error

Removing tracked route .............